$ rpki-client -vvf rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft File: gJ7_H3gZuBdR8XerWv7YK8wypWk.mft (raw, json) Hash identifier: S50xKHKMkYnGINYJtxxaUBeR+C61q/5pPjK+lXjKOOc= Subject key identifier: F7:85:CA:C3:78:1A:97:B2:15:37:EF:05:1A:3E:C9:38:F3:C3:DD:B3 Authority key identifier: 80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69 Certificate issuer: /CN=A9158028/serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569 Certificate serial: 063D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft Manifest number: 0638 Signing time: Tue 12 Aug 2025 23:06:42 +0000 Manifest this update: Tue 12 Aug 2025 23:06:42 +0000 Manifest next update: Tue 19 Aug 2025 23:06:42 +0000 Files and hashes: 1: gJ7_H3gZuBdR8XerWv7YK8wypWk.crl (hash: P17Zl0nJ74C63qrRcwJPD52NlXh2q31QZ5/BfXn0/iI=) 2: 687D7178B85D11EBB2E17F26C4F9AE02.roa (hash: IMdjByBIYJm1pushgtHVRf7baWnF2aGGxcZRsZb6Kqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 23:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1597 (0x63d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158028, serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569 Validity Not Before: Aug 12 23:06:42 2025 GMT Not After : Aug 19 23:06:42 2025 GMT Subject: CN=689bc902-91bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9c:3d:a5:5d:14:45:f3:15:ec:9e:43:4c:67: b2:ae:4e:4d:65:b0:a4:b1:41:14:fb:99:bb:f1:70: 7e:a5:e0:2e:28:fe:04:86:f9:24:04:cd:67:e3:b9: 0e:41:f9:4f:c3:54:6c:44:0f:7d:67:2b:91:2b:3f: e9:5a:1b:75:dc:35:6c:54:13:2c:08:d8:c1:83:ed: ef:ac:de:b8:57:f1:50:9e:1b:70:b4:c1:d2:91:d0: af:87:94:b8:3f:6f:1b:78:52:b9:6b:4a:ff:a3:be: cf:bd:c0:63:81:9f:8d:a4:ea:62:ca:fc:a0:36:74: c7:3d:a9:f3:31:2e:5a:87:85:76:a0:75:64:7e:67: e2:6d:be:98:99:7b:8a:69:f4:41:e9:44:51:40:66: 99:67:4d:e9:de:ae:27:b8:1c:64:1c:51:fe:89:7e: fe:63:4e:b7:b5:aa:39:eb:26:16:5f:b0:18:89:4e: 45:8c:53:91:2f:97:9b:dd:27:8f:90:ea:27:21:9c: 43:02:54:2b:33:a2:61:99:d5:c6:51:18:57:57:59: fc:0b:d5:86:83:a3:8d:d0:63:51:b6:8a:a8:84:c7: 36:da:12:b9:a2:9c:75:ff:0a:9f:1f:a5:4c:de:4a: aa:07:c2:b0:6d:16:88:d9:c5:7f:fb:ee:ff:63:87: a3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:85:CA:C3:78:1A:97:B2:15:37:EF:05:1A:3E:C9:38:F3:C3:DD:B3 X509v3 Authority Key Identifier: keyid:80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:e0:f1:93:5a:85:67:65:f1:98:32:3a:70:2c:18:30:72:24: 85:55:52:7e:60:9d:d1:47:8e:67:d8:af:af:4e:e3:42:7f:eb: 75:0c:7e:58:cb:20:01:a7:33:38:91:bf:d5:26:65:a1:46:76: 4a:89:02:a7:40:62:e4:1f:33:4d:48:b3:a8:da:39:24:41:f4: 04:47:0e:bc:00:cd:94:7c:07:b8:1a:15:77:96:76:3b:91:1f: 7a:7a:28:06:88:fe:a6:96:41:20:3a:23:98:f8:28:e5:be:9a: ca:c7:a0:82:db:1d:4a:da:6c:ba:bc:1b:3d:d3:74:fd:e8:5a: 3f:3e:79:a4:0b:61:cc:fe:76:cc:72:59:f2:d7:ac:6a:91:36: ff:e8:7d:00:5a:22:60:01:1a:5d:8a:14:62:ff:c1:4e:86:92: 0c:f1:44:ea:8e:78:06:58:94:b9:70:40:f3:de:96:d7:2c:cc: 18:c6:2c:ea:9f:23:34:c3:4d:ee:4c:31:b2:45:bc:86:86:38: 9c:32:35:d9:0f:2b:ae:23:3e:32:ef:7f:8b:39:4a:f8:a3:94: 3c:99:9f:25:79:63:05:85:c4:a1:ef:56:61:6d:67:8d:05:a3: 02:13:fe:85:16:b4:6b:92:98:9b:c9:29:53:e2:2e:fb:37:c7: a4:bb:94:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwMjgxMTAvBgNVBAUTKDgwOUVGRjFGNzgxOUI4MTc1MUYxNzdBQjVBRkVEODJC Q0MzMkE1NjkwHhcNMjUwODEyMjMwNjQyWhcNMjUwODE5MjMwNjQyWjAYMRYwFAYD VQQDEw02ODliYzkwMi05MWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Zw9pV0URfMV7J5DTGeyrk5NZbCksUEU+5m78XB+peAuKP4EhvkkBM1n47kO QflPw1RsRA99ZyuRKz/pWht13DVsVBMsCNjBg+3vrN64V/FQnhtwtMHSkdCvh5S4 P28beFK5a0r/o77PvcBjgZ+NpOpiyvygNnTHPanzMS5ah4V2oHVkfmfibb6YmXuK afRB6URRQGaZZ03p3q4nuBxkHFH+iX7+Y063tao56yYWX7AYiU5FjFORL5eb3SeP kOonIZxDAlQrM6JhmdXGURhXV1n8C9WGg6ON0GNRtoqohMc22hK5opx1/wqfH6VM 3kqqB8KwbRaI2cV/++7/Y4ejswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPeFysN4 GpeyFTfvBRo+yTjzw92zMB8GA1UdIwQYMBaAFICe/x94GbgXUfF3q1r+2CvMMqVp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODAyOC84QTRBREVFNEEx MUYxMUVCOTMzOUQ1MEFDNEY5QUUwMi9nSjdfSDNnWnVCZFI4WGVyV3Y3WUs4d3lw V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKN19IM2dadUJkUjhYZXJXdjdZSzh3eXBXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODAyOC84QTRBREVFNEExMUYxMUVCOTMzOUQ1MEFDNEY5QUUwMi9nSjdfSDNnWnVC ZFI4WGVyV3Y3WUs4d3lwV2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT4PGTWoVnZfGYMjpwLBgwciSFVVJ+YJ3RR45n2K+vTuNCf+t1DH5Y yyABpzM4kb/VJmWhRnZKiQKnQGLkHzNNSLOo2jkkQfQERw68AM2UfAe4GhV3lnY7 kR96eigGiP6mlkEgOiOY+CjlvprKx6CC2x1K2my6vBs903T96Fo/PnmkC2HM/nbM clny16xqkTb/6H0AWiJgARpdihRi/8FOhpIM8UTqjngGWJS5cEDz3pbXLMwYxizq nyM0w03uTDGyRbyGhjicMjXZDyuuIz4y73+LOUr4o5Q8mZ8leWMFhcSh71ZhbWeN BaMCE/6FFrRrkpibySlT4i77N8eku5RK -----END CERTIFICATE-----Generated at Wed Aug 13 02:15:31 2025 by rpki-client